vercel-deployment-password-gate

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime workflow reads outsider-supplied free text from incoming HTTP requests—specifically the Host header for DEPLOY_GATE_UNPROTECTED_HOSTS exceptions and the x-deploy-gate-bypass header/query param (plus the /__deploy-unlock POST password field)—inside templates/deploy-gate.ts / templates/deploy-gate.vercel.ts previewGate() at request time.